Biometric data; consent for collection required, sale prohibited, deletion required, and civil penalties imposed.

1. **ONE-SENTENCE SUMMARY:** This bill requires businesses to obtain consent before collecting biometric data, prohibits the sale of such data, mandates its deletion, and imposes civil penalties for non-compliance. 2. **KEY REQUIREMENTS:** - Obtain explicit consent from individuals before collecting any biometric data (like fingerprints, facial recognition, etc.). - Do not sell biometric data to third parties. - Delete biometric data upon request from the individual or when it is no longer needed. 3. **DEADLINES:** - The bill will take effect 90 days after it is signed into law. 4. **PENALTIES:** - Businesses that fail to comply may face civil penalties, which could include fines but specific amounts are not detailed in the summary. 5. **SMB IMPACT:** Small businesses will need to implement processes for obtaining consent and managing biometric data, which may require additional training or software solutions to ensure compliance. Failure to comply could lead to costly penalties.